Engineering-L2-Bengaluru-Vice President-Security Engineering

Goldman Sachs; Bengaluru; On-site; INR 2,600,000 - 4,200,000; Full time

Job summary

Goldman Sachs seeks a senior PAM program leader to drive the enterprise privileged access management program across IAM, Infrastructure, Cloud and Technology Risk. You will establish firm-wide standards, govern privileged accounts and roles, and address findings with regulators and internal teams.

You will develop multi-year uplift plans, implement automation for lifecycle management, and build executive dashboards showing KPI coverage, MFA reach, and control effectiveness to inform leadership

Qualifications

• Bachelor's degree or equivalent practical experience in a relevant field.
• 7+ years of experience in Cybersecurity, IAM, PAM, Information Security, Technology Risk, or Security Engineering.
• Strong knowledge of PAM, IAM, Zero Trust, RBAC, secrets management, MFA, cloud security across AWS, Azure, GCP.
• Stakeholder management and executive communication skills.
• Experience driving cross-functional initiatives with engineering, risk, compliance, and audit teams.

Responsibilities

• Drive strategic roadmap and execution of the enterprise PAM program.
• Establish and maintain firm-wide privileged access standards, controls, and operating procedures.
• Lead cross-functional initiatives spanning IAM, Infrastructure, Cloud, Application Engineering, and Technology Risk teams.
• Develop and execute multi-year PAM capability uplift programs.
• Define and oversee governance processes for privileged accounts, privileged roles, break-glass access, and privileged activities.
• Ensure alignment with internal security standards, regulatory requirements, and industry frameworks such as NIST.
• Partner with Technology Risk, Compliance, Internal Audit, and regulators to address PAM-related findings and remediation activities.
• Build and maintain KRIs and KPIs for executive reporting.
• Partner with engineering teams to implement PAM controls within enterprise platforms and applications.
• Drive automation for onboarding, provisioning, certification, monitoring, and de-provisioning privileged access.
• Support cloud and hybrid environments, ensuring secure management of privileged identities.
• Influence architectural decisions that improve security while maintaining operational efficiency.
• Develop executive dashboards measuring PAM coverage, privileged account inventory, JIT adoption, MFA coverage, review completion rates, and control effectiveness.
• Provide regular updates to senior management committees and leadership.
• Translate technical risk into business-focused insights and recommendations.

Skills

Cybersecurity

IAM

PAM

Information Security

Technology Risk

Security Engineering

Education

Bachelor’s degree in computer science, Cybersecurity, Information Systems, Engineering, or equivalent practical experience

Tools

CyberArk

BeyondTrust

HashiCorp Vault

AWS IAM

Entra ID PIM

Job description

Job Description

• Drive strategic roadmap and execution of the enterprise PAM program.
• Establish and maintain firm-wide privileged access standards, controls, and operating procedures.
• Lead cross-functional initiatives spanning IAM, Infrastructure, Cloud, Application Engineering, and Technology Risk teams.
• Develop and execute multi-year PAM capability uplift programs.
• Define and oversee governance processes for privileged accounts, privileged roles, break-glass access, and privileged activities.
• Ensure alignment with internal security standards, regulatory requirements, and industry frameworks such as NIST.
• Partner with Technology Risk, Compliance, Internal Audit, and regulators to address PAM-related findings and remediation activities.
• Build and maintain Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs) for executive reporting
• Partner with engineering teams to implement PAM controls within enterprise platforms and applications.
• Drive automation for onboarding, provisioning, certification, monitoring, and de-provisioning privileged access.
• Support cloud and hybrid environments, ensuring secure management of privileged identities across modern infrastructure.
• Influence architectural decisions that improve security while maintaining operational efficiency.
• Develop executive dashboards measuring PAM coverage, privileged account inventory, JIT adoption, MFA coverage, review completion rates, and control effectiveness.
• Provide regular updates to senior management committees and leadership.
• Translate technical risk into business-focused insights and recommendations.

Roles and Key Responsibilities

• Drive strategic roadmap and execution of the enterprise PAM program.
• Establish and maintain firm-wide privileged access standards, controls, and operating procedures.
• Lead cross-functional initiatives spanning IAM, Infrastructure, Cloud, Application Engineering, and Technology Risk teams.
• Develop and execute multi-year PAM capability uplift programs.
• Define and oversee governance processes for privileged accounts, privileged roles, break-glass access, and privileged activities.
• Ensure alignment with internal security standards, regulatory requirements, and industry frameworks such as NIST.
• Partner with Technology Risk, Compliance, Internal Audit, and regulators to address PAM-related findings and remediation activities.
• Build and maintain Key Risk Indicators (KRIs) and Key Performance Indicators (KPIs) for executive reporting
• Partner with engineering teams to implement PAM controls within enterprise platforms and applications.
• Drive automation for onboarding, provisioning, certification, monitoring, and de-provisioning privileged access.
• Support cloud and hybrid environments, ensuring secure management of privileged identities across modern infrastructure.
• Influence architectural decisions that improve security while maintaining operational efficiency.
• Develop executive dashboards measuring PAM coverage, privileged account inventory, JIT adoption, MFA coverage, review completion rates, and control effectiveness.

  Required Qualifications

  • Bachelor’s degree in computer science, Cybersecurity, Information Systems, Engineering, or equivalent practical experience.
  • 7+ years of experience in Cybersecurity, IAM, PAM, Information Security, Technology Risk, or Security Engineering.
  • Strong understanding of Privileged Access Management (PAM), Identity and Access Management (IAM), Zero Trust security principles, role-based access controls and privileged role governance, secrets management and vault technologies, modern authentication and MFA, security monitoring and detection engineering, and cloud security across AWS, Azure, and GCP environments.
  • Strong stakeholder management and executive communication skills.
  • Experience driving cross-functional initiatives involving engineering, risk, compliance, and audit teams.

  Preferred Qualifications

  • Familiarity with security and regulatory frameworks such as NIST CSF, NIST 800-53, ISO 27001, FFIEC, SOX, or similar standards, with experience supporting regulatory exams or audit engagements.
  • Experience with CyberArk, BeyondTrust, HashiCorp Vault, AWS IAM, Entra ID PIM, or equivalent PAM technologies is an advantage.
  • Relevant security certifications, such as CISSP, CISM, CRISC, CCSP, or PAM/IAM-related credentials, are highly desirable.

  Why Join Us

  This is an opportunity to build and scale one of the firm's most strategic cybersecurity programs. You will work with senior leaders, security architects, engineers, and risk professionals to shape the future of privileged